* [refpolicy] [PATCH] Allow ssh-agent to send signals to itself
@ 2015-07-19 17:48 Luis Ressel
2015-07-20 16:12 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Luis Ressel @ 2015-07-19 17:48 UTC (permalink / raw)
To: refpolicy
This is neccessary for "ssh-agent -k".
---
policy/modules/services/ssh.if | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/services/ssh.if b/policy/modules/services/ssh.if
index cbd0cdd..3fda887 100644
--- a/policy/modules/services/ssh.if
+++ b/policy/modules/services/ssh.if
@@ -346,7 +346,7 @@ template(`ssh_role_template',`
# SSH agent local policy
#
- allow $1_ssh_agent_t self:process setrlimit;
+ allow $1_ssh_agent_t self:process { setrlimit signal };
allow $1_ssh_agent_t self:capability setgid;
allow $1_ssh_agent_t { $1_ssh_agent_t $3 }:process signull;
--
2.4.5
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [refpolicy] [PATCH] Allow ssh-agent to send signals to itself
2015-07-19 17:48 [refpolicy] [PATCH] Allow ssh-agent to send signals to itself Luis Ressel
@ 2015-07-20 16:12 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2015-07-20 16:12 UTC (permalink / raw)
To: refpolicy
On 7/19/2015 1:48 PM, Luis Ressel wrote:
> This is neccessary for "ssh-agent -k".
> ---
> policy/modules/services/ssh.if | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/policy/modules/services/ssh.if b/policy/modules/services/ssh.if
> index cbd0cdd..3fda887 100644
> --- a/policy/modules/services/ssh.if
> +++ b/policy/modules/services/ssh.if
> @@ -346,7 +346,7 @@ template(`ssh_role_template',`
> # SSH agent local policy
> #
>
> - allow $1_ssh_agent_t self:process setrlimit;
> + allow $1_ssh_agent_t self:process { setrlimit signal };
> allow $1_ssh_agent_t self:capability setgid;
>
> allow $1_ssh_agent_t { $1_ssh_agent_t $3 }:process signull;
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-07-20 16:12 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-07-19 17:48 [refpolicy] [PATCH] Allow ssh-agent to send signals to itself Luis Ressel
2015-07-20 16:12 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.